Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
File:                     3138392e34352e31362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          LcEqJZ+D8nRiYge+rPN3TgqgDGMnk67XSXYNk7b1Rho=
Subject key identifier:   5F:4E:E6:07:4F:7E:A2:CB:29:9C:D3:69:2D:53:0B:9E:9E:83:7C:A9
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       2595E80A2AAB712F455536F742CAE9C622D57941
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:29 +0000
ROA not before:           Fri 03 Mar 2023 12:14:29 +0000
ROA not after:            Fri 01 Mar 2024 12:19:29 +0000
asID:                     53059
IP address blocks:        189.45.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:95:e8:0a:2a:ab:71:2f:45:55:36:f7:42:ca:e9:c6:22:d5:79:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:29 2023 GMT
            Not After : Mar  1 12:19:29 2024 GMT
        Subject: CN=5F4EE6074F7EA2CB299CD3692D530B9E9E837CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:c4:99:45:32:37:0b:aa:d5:ff:3e:9d:19:
                    a9:c0:54:94:85:a4:29:1c:89:4a:5f:60:e7:c3:69:
                    ba:60:04:c0:7b:ce:e1:72:c6:2a:0f:12:45:1f:38:
                    0f:bd:01:29:b6:8b:a4:4e:40:08:db:f1:0e:e1:a1:
                    59:84:ef:9b:4e:a5:10:5d:de:ec:bd:3a:f0:6d:7b:
                    2f:c1:55:6d:6e:ac:da:09:bc:4f:bc:9c:29:47:16:
                    11:53:66:0f:0e:e7:d0:c9:78:fb:f3:69:7d:0e:81:
                    c3:9a:2c:4b:c3:51:ec:46:81:8a:b0:f8:e1:6f:8d:
                    b7:8e:58:8a:19:5c:db:e0:c6:ee:f4:71:64:d8:e1:
                    d6:c8:49:e3:b3:9c:4f:6e:f9:9a:26:11:48:71:ef:
                    bb:10:eb:3a:2e:09:d9:d3:74:8d:fb:14:ce:25:9e:
                    2b:9a:38:73:47:2a:fb:7e:6e:77:85:26:b2:b5:fc:
                    81:db:66:7a:cc:c4:c2:06:13:62:fe:a7:46:9b:fa:
                    ef:25:83:da:49:a0:57:7e:ff:8e:d3:56:08:a3:43:
                    21:fa:d2:73:90:07:04:44:6a:78:51:c7:9f:ba:71:
                    68:02:f4:5c:71:41:1e:0a:22:4a:cc:f0:b7:a2:ee:
                    7c:ff:5d:83:07:8e:b5:d0:9d:8f:f0:16:b4:92:0c:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:E6:07:4F:7E:A2:CB:29:9C:D3:69:2D:53:0B:9E:9E:83:7C:A9
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:4b:d8:bb:b4:22:b7:a6:6c:3e:0e:24:17:3d:7d:4d:f4:
         ab:94:8c:e5:07:83:66:77:78:83:51:dd:73:84:a2:16:3f:6c:
         77:8c:71:b3:3a:9d:fd:68:ec:20:a6:df:c6:dd:d5:32:de:4a:
         32:69:f6:2e:2e:cb:c4:88:d6:70:b1:1a:4b:93:ce:32:06:d3:
         62:8e:4e:bd:24:96:3d:17:c6:af:89:06:b3:f1:8c:08:fb:b9:
         53:6c:63:36:eb:f6:29:5c:56:2a:cd:72:bb:41:39:c2:ef:67:
         69:ec:92:5f:13:22:c3:aa:9e:96:8f:44:8f:64:39:65:4f:29:
         eb:2a:65:96:c9:30:fc:fb:32:c9:0b:b4:e0:f3:58:9a:1d:72:
         48:a4:44:99:4e:a4:72:3c:2c:a3:be:5d:d3:79:b5:38:a2:05:
         29:b7:4c:2f:63:64:c7:46:b4:d2:51:e1:50:3d:46:ea:ae:20:
         4d:11:35:55:4e:48:45:74:13:ea:23:97:4d:56:82:9f:4f:61:
         fe:6c:3f:e4:c0:0f:c3:15:d7:61:5c:8e:3d:c0:15:b1:65:e7:
         2e:1e:b8:5c:4e:61:f2:bf:b6:51:f5:d3:39:72:4c:b3:60:a9:
         88:fa:1b:1a:cc:97:5e:b2:0b:bb:da:49:8a:95:14:5e:b9:73:
         da:10:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org